by wong2 · MCP Server · ★ 185
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
npm install litemcp zod
npx litemcp dev server.jsTaken from the project's README on GitHub.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 185 |
| Forks | 16 |
| Language | TypeScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 73/100 |
| Open Issues | 3 |
| Last Updated | 2025-04-27 |
| Created | 2024-12-09 |
| Platforms | mcp, node |
| Est. Tokens | ~8k |
LiteMCP A TypeScript framework for building MCP (Model Context Protocol) servers elegantly Deprecate notice: Since the official SDK already offers a high-level API similar to this project, this project will no longer be maintained.
Looking for a litemcp alternative? If you're comparing litemcp with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
The official FastMCP TypeScript library for building MCP servers, clients, and apps 🏎️ 🏎️ 🏎️
A Model Context Protocol server for connecting Notion to MCP-compatible clients
Open-source cross-agent memory layer for coding agents via MCP. Compatible with Claude Code, Codex, Cursor, Wi
Clean, LLM-optimized Reddit MCP server. Browse posts, search content, analyze users. No fluff, just Reddit dat
Codebase intelligence for AI. Detects patterns & conventions + remembers decisions across sessions. MCP server
Read, write, search, and surgically edit Obsidian vault notes, tags, and frontmatter via MCP. STDIO or Streama
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: